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1.Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud 
is compliant with local regulatory standards? 

A. Running Amazon GuardDuty 

B. Using AWS Artifact 

C. Creating an AWS Support ticket 

D. AWS Cloud Trail logs 

Answer: B 


2.Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS 
accounts? 

A. AWS Organizations 

B. Cost Explorer 

C. AWS Trusted Advisor 

D. AWS Management Console 

Answer: A 

Explanation: 

You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for 
multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every 
organization in AWS Organizations has a management account that pays the charges of all the member 
accounts. 


3.A retail company is building a new mobile app. The company is evaluating whether to build the app at 
an on-premises data center or in the AWS Cloud. 

Which of the following are benefits of building this app in the AWS Cloud? (Select TWO.) 

A. A large, upfront capital expense and low variable expenses 

B. Increased speed for trying out new projects 

C. Complete control over the physical security of the infrastructure 

D. Flexibility to scale up in minutes as the application becomes popular 

E. Ability to pick the specific data centers that will host the application servers 

Answer: A,D 


4.Which of the following consists of one or more isolated data centers in the same regional area that are 
interconnected through low-latency networks? 

A. Availability Zone 

B. Edge location 

C. AWS Region 

D. Private networking 

Answer: A 


5.Which AWS service enables the decoupling and scaling of applications? 
A. Amazon Simple Queue Service (Amazon SQS) 

B. AWS Outposts 

C. Amazon S3 

D. Amazon Simple Email Service (Amazon SES) 
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Answer: A 

Explanation: 

Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables you to 
decouple and scale microservices, distributed systems, and serverless applications. 


6.Which of the following is an AWS key-value database offering consistent single-digit millisecond 
performance at any scale? 

A. Amazon RDS 

B. Amazon Aurora 

C. Amazon DynamoDB 

D. Amazon Redshift 

Answer: B 

Explanation: 

Amazon DynamoDB is designed to provide consistent single-digit millisecond latency for any scale of 
workloads. This consistent performance is a big part of why the Snapchat Stories feature, which includes 
Snapchat's largest storage write workload, moved to DynamoDB. 


7.A company is moving its virtual machines (VMs) from an on-premises environment to the AWS Cloud. 
The company plans to deploy Amazon EC2 instances. 

Which cloud computing model will the company use in this scenario? 

A. Platform as a service (PaaS) 

B. Infrastructure as a service (laaS) 

C. Function as a service (FaaS) 

D. Software as a service (SaaS) 

Answer: B 


8.Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity? 
A. Agility 

B. Elasticity 

C. Reliability 

D. Durability 

Answer: B 


9.A developer is working on enhancing applications at AWS. The developer needs a service that can 
securely host GitHub-based code, repositories, and version controls. 

Which AWS service should the developer use? 

A. AWS CodeStar 

B. Amazon CodeGuru 

C. AWS CodeCommit 

D. AWS CodePipeline 

Answer: C 


10.Which AWS service or tool lists all the users in an account and reports on the status of account details, 
including passwords, access keys, and multi-factor authentication (MFA) devices? 
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A. WS Shield 

B. AWS Trusted Advisor 

C. Amazon Inspector 

D. IAM credential report 

Answer: D 

Explanation: 

You can generate and download a credential report that lists all users in your account and the status of 
their various credentials, including passwords, access keys, and MFA devices. You can get a credential 
report from the AWS Management Console, the AWS SDKs and Command Line Tools, or the IAM API. 


11.Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS 
Cloud? 

A. Scale the number of EC2 instances in or out automatically, based on demand. 

B. Use serverless EC2 instances. 

C. Scale the size of EC2 instances up or down automatically, based on demand. 

D. Transfer unused CPU resources between EC2 instances. 

Answer: A 


12.A company wants a cost-effective option when running its applications in an Amazon EC2 instance for 
short time periods. The applications can be interrupted. 

Which EC2 instance type will meet these requirements? 

A. Spot Instances 

B. On-Demand Instances 

C. Reserved Instances 

D. Dedicated Instances 

Answer: A 

Explanation: 

Spot Instances - Spot Instances are the most cost-effective choice if you are flexible about when your 
applications run and if your applications can be interrupted. 


13.Which of the following are characteristics of a serverless application that runs in the AWS Cloud? 
(Select TWO.) 

A. Users must manually configure Amazon EC2 instances. 

B. Users have a choice of operating systems. 

C. The application has built-in fault tolerance. 

D. Users can run Amazon EC2 Spot Instances. 

E. The application can scale based on demand. 

Answer: C,E 


14.A company wants to set up an entire development and continuous delivery toolchain for coding, 
building, testing, and deploying application code. 

Which AWS service will meet these requirements? 

A. Amazon CodeGuru 

B. AWS CodeStar 
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C. AWS CodeCommit 
D. AWS CodeDeploy 
Answer: B 


15.Which of the following are design principles of the reliability pillar of the AWS Well-Architected 
Framework? (Select TWO.) 

A. Perform operations as code. 

B. Stop guessing capacity. 

C. Adopt serverless architecture whenever possible. 

D. Use build and deployment management systems. 

E. Make changes to infrastructure by using automation. 

Answer: B,E 


16.A company is using AWS Lambda. 

Which task is the company’s responsibility, according to the AWS shared responsibility model? 

A. Update the Lambda runtime language. 

B. Maintain the runtime environment. 

C. Maintain the networking infrastructure. 

D. Configure the resource. 

Answer: A 

Explanation: 

https://aws.amazon.com/lambda/security-overview-of-aws-lambda/ When customers use AWS Lambda, 
AWS manages the underlying infrastructure and foundation services, the operating system, and the 
application platform. Customers themselves are responsible for the security of their code, the storage and 
accessibility of sensitive data, and identity and access management (IAM) to the Lambda service and 
within their function. 


17.Which service is an AWS in-memory data store service? 
A. Amazon Aurora 

B. Amazon RDS 

C. Amazon DynamoDB 

D. Amazon ElastiCache 

Answer: D 


18.An ecommerce company has migrated its IT infrastructure from an on-premises data center to the 
AWS Cloud. 

Which cost is the company's direct responsibility? 

A. Cost of application software licenses 

B. Cost of the hardware infrastructure on AWS 

C. Cost of power for the AWS servers 

D. Cost of physical security for the AWS data center 

Answer: A 


19.A company is considering a migration from on premises to the AWS Cloud. The company’s IT team 
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needs to offload support of the workload. 

What should the IT team do to accomplish this goal? 

A. Use AWS Managed Services to provision, run, and support the company infrastructure. 

B. Build hardware refreshes into the operational calendar to ensure availability. 

C. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances. 

D. Overprovision compute capacity for seasonal events and traffic spikes to prevent downtime. 
Answer: A 


20.A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. 
The company has decided to use Amazon EC2 instances to run this database. 

Which of the following is the company responsible for managing, according to the AWS shared 
responsibility model? 

A. EC2 hypervisor 

B. Security patching of the guest operating system 

C. Network connectivity of the host server 

D. Uptime service level agreement (SLA) for the EC2 instances 

Answer: B 


21.A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, 
and Amazon RDS. 

Which security measures fall under the responsibility of AWS? (Select TWO.) 

A. Running a virus scan on EC2 instances 

B. Protecting against IP spoofing and packet sniffing 

C. Installing the latest security patches on the RDS instance 

D. Encrypting communication between the EC2 instances and the Elastic Load Balancer 

E. Configuring a security group and a network access control list (NACL) for EC2 instances 

Answer: B,C 


22.A user has been granted permission to change their own IAM user password. 
Which AWS services can the user use to change the password? (Select TWO.) 
A. AWS Command Line Interface (AWS CLI) 

B. AWS Key Management Service (AWS KMS) 

C. AWS Management Console 

D. AWS Resource Access Manager (AWS RAM) 

E. AWS Secrets Manager 

Answer: A,C 


23.Which AWS service provides an isolated virtual network to connect AWS services and resources? 
A. Amazon EC2 

B. Amazon DynamoDB 

C. Amazon Lightsail 

D. Amazon VPC 

Answer: D 

Explanation: 
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Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network 
that you've defined. This virtual network closely resembles a traditional network that you'd operate in your 
own data center, with the benefits of using the scalable infrastructure of AWS. 


24.A company wants to improve the overall availability and performance of its applications that are hosted 
on AWS. 

Which AWS service should the company use? 

A. Amazon Connect 

B. Amazon Lightsail 

C. AWS Global Accelerator 

D. AWS Storage Gateway 

Answer: C 


25.A company is moving its on-premises NoSQL database to the AWS Cloud Which AWS service should 
the company use for the NoSQL database? 

A. Amazon Redshift 

B. Amazon RDS for MySQL 

C. Amazon Quantum Ledger Database (Amazon QLDB) 

D. Amazon DynamoDB 

Answer: D 


26.According to the AWS shared responsibility model, which activities are the customer's responsibility for 
security in the AWS Cloud? (Select TWO.) 

A. Hardware maintenance 

B. Amazon EC2 operating system patching 

C. API access control for AWS resources 

D. Configuration management of infrastructure devices 

E. Maintenance of an Availability Zone 

Answer: B,C 


27.Which of the following describes some of the core functionality of Amazon S83? 

A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2 

B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and 
data availability. 

C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over 
the industry-standard SMB protocol. 

D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises 
resources. 

Answer: B 

Explanation: 

Amazon S3 is object storage built to store and retrieve any amount of data from anywhere. It’s a simple 
storage service that offers industry leading durability, availability, performance, security, and virtually 
unlimited scalability at very low costs. 


